Transform (Isakmp Profile) - Allied Telesis AT-AR3050S Command Reference Manual

IP C
SEC OMMANDS
(ISAKMP P )
TRANSFORM ROFILE

transform (ISAKMP Profile)

Overview Use this command to create an ISAKMP profile transform which specifies the
encryption and authentication algorithms used to protect data in the tunnel.
Use the no variant to delete a previously created transform.
Syntax transform <1-255> integrity {sha1|sha256|sha512} encryption
{3des|aes128|aes192|aes256} group {2|5|14|15|16|18}
no transform <1-255>
Default By default, an ISASMP profile has no transforms and so will not be active.
Mode ISAKMP Profile Configuration
Examples To create an ISAKMP profile transform, use the following commands:
awplus(config)#
awplus(config-isakmp-profile)#
encryption 3des group 5
C613-50077-01 REV A
Parameter Description
<1-255>
Transform priority (1 is the highest)
sha1
Secure Hash Standard with 160-bit digest size
sha256
Secure Hash Standard with 256-bit digest size
sha512
Secure Hash Standard with 512 bit digest size
3des
Triple DES symmetric key block cipher with a 168-bit key
aes128
Advanced Encryption Standard symmetric key block cipher with a
128-bit key
aes192
Advanced Encryption Standard symmetric key block cipher with a
192-bit key
aes256
Advanced Encryption Standard symmetric key block cipher with a
256-bit key
group
Diffie-Hellman group
2
1024-bit MODP Group
5
1536-bit MODP Group
14
2048-bit MODP Group
15
3072-bit MODP Group
16
4096-bit MODP Group
18
8192-bit MODP Group
crypto isakmp profile my_profile
Command Reference for AT-AR3050S
AlliedWare Plus™ Operating System - Version 5.4.5-2.x
transform 2 integrity sha1
2305